ab11 Privacy Policy — How We Collect, Use, and Protect Your Data

This Privacy Policy ("Policy") governs how ab11 ("the Platform", "we", "us", "our") collects, processes, stores, and discloses personal information obtained from players and visitors ("you", "your") who access or use the ab11 website at ab11.org and any associated services. By registering an account, making a deposit, or continuing to use the ab11 platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

ab11 is committed to safeguarding the privacy of every player. We apply industry-standard security measures and follow responsible data management practices designed to protect your personal information from unauthorised access, disclosure, or misuse. This Policy should be read alongside our Terms & Conditions and Responsible Gaming guidelines, which together form the complete regulatory framework for your use of the ab11 platform.

ab11 collects personal information through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and in certain cases from third-party verification providers. The categories of personal data we collect are set out below.

ab11 does not knowingly collect personal data from individuals under the age of 18. If we become aware that data has been submitted by an underage person, we will delete that data immediately and close the associated account. 18+

ab11 processes your personal data only where we have a lawful basis to do so. The primary purposes for which we use the data we collect are as follows:

• Account creation and management: To register your account, verify your identity, process your login credentials, and maintain your account profile across sessions.
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, Visa, and Mastercard; to verify payment account ownership; and to maintain accurate financial records of all transactions conducted on the platform.
• KYC and AML compliance: To comply with anti-money laundering obligations, we use identity and financial data to verify the source of funds, screen against sanctions lists, and assess the risk profile of high-volume accounts.
• Platform security and fraud prevention: To detect and prevent unauthorised account access, fraudulent transactions, bonus abuse, multi-accounting, and other prohibited conduct described in our Terms & Conditions.
• Customer support: To respond to support queries, resolve account disputes, process self-exclusion requests, and communicate important account-related information.
• Responsible gaming: To monitor betting patterns for signs of problem gambling behaviour, to apply deposit limits and self-exclusion restrictions requested by the player, and to provide personalised responsible gaming guidance where warranted.
• Platform improvement: To analyse aggregated usage data, identify technical issues, improve game loading performance, and enhance the overall user experience for Bangladeshi players.
• Marketing communications: To send promotional offers, bonus notifications, and seasonal campaign updates (e.g., Eid promotions, BPL cricket season offers, Pohela Boishakh bonuses) to players who have opted in to receive marketing communications. You may opt out of marketing messages at any time by contacting [email protected].
• Legal obligations: To comply with applicable laws, respond to lawful requests from competent authorities, and to enforce our Terms & Conditions where necessary.

ab11 does not sell, rent, or trade your personal information to third parties. We may share your data with a limited number of trusted parties only where necessary and under strict confidentiality obligations:

• Payment service providers: We share relevant financial data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard solely for the purpose of processing your deposit and withdrawal transactions. These providers operate under their own privacy policies and are not permitted to use your data for any other purpose.
• Game software providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe may receive your account session data (player ID, session token, game round ID) to facilitate gameplay, manage game sessions, and resolve disputes. These providers do not receive your full identity or financial data.
• Identity verification partners: We may use third-party KYC service providers to assist in verifying your NID, passport, and source-of-funds documents. These providers operate under contractual data processing agreements and are prohibited from retaining or using your documents for any purpose other than the verification task.
• Legal and regulatory authorities: Where required by law or in response to a lawful request from a competent Bangladeshi government authority, court order, or law enforcement body, ab11 may disclose your personal data. We will notify you of such a disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of ab11's business, your personal data may be transferred to the successor entity. You will be notified of any such transfer, and the successor entity will be required to honour the privacy commitments described in this Policy.

ab11 uses cookies and similar tracking technologies to operate the platform effectively and to maintain a secure, personalised experience for each player. A cookie is a small text file placed on your device by the ab11 website. Cookies do not contain executable code and cannot access other files on your device.

The following categories of cookies are used on the ab11 platform:

• Strictly necessary cookies: These are essential for the platform to function. They manage your login session, maintain your account state across pages, prevent cross-site request forgery (CSRF), and enable secure payment processing flows. These cookies cannot be disabled without impairing your ability to use the platform.
• Functional cookies: These remember your preferences — such as your selected language, preferred payment method, and notification settings — so that you do not need to re-enter them on each visit. They persist across sessions and are deleted when they reach their expiry date or when you clear your browser cookies.
• Analytics cookies: ab11 uses internal analytics tools to collect aggregated, anonymised data about how players navigate and use the platform. This includes page visit counts, session durations, game load times, and error frequency. This data helps us improve platform performance and the overall player experience. No personally identifiable information is included in analytics reports.
• Fraud prevention cookies: These collect technical signals — including device fingerprint components, IP address, and behavioural patterns — used by our security systems to detect and prevent account fraud, multi-accounting, and automated bot activity.

ab11 does not deploy third-party advertising cookies, social media tracking pixels, or any cookie designed to build a cross-site profile of your browsing behaviour outside the ab11 platform.

You may manage or delete cookies through your browser settings at any time. Please be aware that disabling strictly necessary cookies will prevent you from logging in and using core platform features. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

ab11 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or destruction. Our security framework includes the following layers of protection:

• Transport-layer encryption: All data transmitted between your browser or mobile device and ab11's servers is encrypted using 256-bit SSL and TLS 1.3 protocol. A valid SSL certificate is maintained at all times and is verifiable via the padlock indicator in your browser's address bar.
• Password hashing: Player passwords are never stored in plain text. They are processed using an industry-standard cryptographic hashing algorithm with salt before being stored in the database. This means that even internal ab11 staff cannot read your password.
• Access controls: Access to personal data within ab11 is restricted to authorised personnel whose roles require it — for example, KYC verification staff, finance teams processing withdrawals, and customer support agents handling account queries. All access is logged and audited.
• Server hardening: ab11's servers are configured with restrictive firewall rules, regular security patching, intrusion detection systems, and automated alerting for suspicious access patterns.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their ab11 accounts. When 2FA is active, a one-time passcode is sent to your registered Bangladesh mobile number each time a login is attempted from an unrecognised device.
• Regular security audits: ab11 conducts periodic security assessments to identify and address vulnerabilities in the platform's infrastructure and application code.

Despite these measures, no data transmission over the internet or method of electronic storage is completely impenetrable. While ab11 takes every reasonable precaution to protect your data, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, ab11 will notify affected players promptly at the email address registered on their account.

ab11 retains your personal data for as long as your account remains active and for a defined period after account closure, as detailed below. Retention periods are set in accordance with legal obligations and the operational requirements of running a responsible gaming platform.

• Active account data: Identity, contact, financial, and usage data associated with an active ab11 account is retained for the full duration of the account's active status. This data is necessary for ongoing KYC compliance, fraud monitoring, and the provision of platform services.
• Post-closure retention: Following account closure — whether initiated by the player or by ab11 — personal data is retained for a period of up to 5 years. This retention period is maintained to fulfil legal obligations including AML record-keeping requirements, to resolve any disputes or legal claims that may arise after closure, and to support any future regulatory audits.
• Transaction records: Financial transaction records, including deposits, withdrawals, bonus claims, and bet histories, are retained for a minimum of 5 years following the date of the transaction, in compliance with applicable financial record-keeping regulations.
• KYC documentation: Copies of NID, passport, and source-of-funds documents submitted during identity verification are retained for a period of 5 years following account closure or the last date on which the document was used for a verification purpose.
• Support communications: Customer support chat transcripts and email correspondence are retained for a period of 2 years following the resolution of the matter to which they relate, except where the subject matter is connected to an ongoing dispute or investigation, in which case they are retained until the matter is fully resolved.
• Marketing data: If you have opted out of marketing communications, your opt-out preference is retained indefinitely to ensure that you are not contacted again. The associated contact details are otherwise suppressed and not used for any active marketing purpose.

Upon expiry of the applicable retention period, personal data is securely and permanently deleted or anonymised in such a way that it can no longer be attributed to any identifiable individual. Anonymised data may be retained beyond these periods for aggregated statistical analysis.

As a player on ab11, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and complete the action within 30 calendar days, unless the complexity of the request requires an extension, in which case we will notify you of the revised timeline.

• Right of access: You have the right to request a copy of all personal data that ab11 holds about you. We will provide this in a structured, commonly used, machine-readable format (e.g., CSV or JSON) upon verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You can update basic contact details directly via your account settings panel.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other lawful basis applies. This right is subject to our legal obligation to retain certain data for up to 5 years post-closure as described in the Data Retention section.
• Right to restrict processing: You may request that we temporarily suspend the use of your personal data in certain circumstances — for example, while a dispute about the accuracy of the data is being resolved.
• Right to data portability: Where processing is based on your consent and carried out by automated means, you have the right to receive your data in a portable format and to request that it be transferred to another controller where technically feasible.
• Right to withdraw consent: Where ab11's processing of your data is based on your consent (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on ab11's legitimate interests, though we may continue processing if we can demonstrate compelling legitimate grounds that override your interests.

ab11 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When we make material changes to this Policy, we will notify registered players by email at the address associated with their account and by posting a prominent notice on the ab11 platform for a period of at least 14 days prior to the changes taking effect.

The revised Policy will be identified by an updated "Effective Date" at the top of this page. Your continued use of the ab11 platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with a revised Policy, you should close your account and cease using the platform before the effective date of the changes.

We encourage you to review this Privacy Policy periodically to stay informed about how ab11 is protecting your personal information. If you have questions or concerns about any aspect of this Policy, or about how your personal data is being processed, please contact us at the details provided below.

This Privacy Policy was last reviewed and updated in January 2026. All prior versions of this Policy are superseded by this document.